Class CryptoKey (3.11.0)

Version 3.11.0

• 3.25.1 (latest)
• 3.25.0
• 3.24.0
• 3.23.0
• 3.22.0
• 3.20.0
• 3.19.0
• 3.18.1
• 3.17.0
• 3.16.0
• 3.15.3
• 3.14.0
• 3.13.0
• 3.12.3
• 3.11.1
• 3.10.1
• 3.9.2
• 3.8.1
• 3.7.1
• 3.6.2
• 3.5.0
• 3.4.0
• 3.3.1
• 3.2.4
• 3.1.1
• 3.0.1
• 2.0.2
• 1.0.2
• 0.15.2
• 0.14.0
• 0.13.0
• 0.12.1

CryptoKey(mapping=None, *, ignore_unknown_fields=False, **kwargs)

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes

Name	Description
transient	google.cloud.dlp_v2.types.TransientCryptoKey Transient crypto key This field is a member of oneof_ source.
unwrapped	google.cloud.dlp_v2.types.UnwrappedCryptoKey Unwrapped crypto key This field is a member of oneof_ source.
kms_wrapped	google.cloud.dlp_v2.types.KmsWrappedCryptoKey Key wrapped using Cloud KMS This field is a member of oneof_ source.